Google-Workspace-Administrator Leak Questions

• Send from Group Email:
• Steps to Add Group Email:

References

• Google Workspace Admin Help: Send Emails from a Group Alias

• Access Admin Console: Go to admin.google.com and sign in with your admin account.
• Navigate to Reports: In the Admin console, go to Reports > Audit > Login.
• Review Login Activity: Look for any unusual or suspicious login attempts, such as logins from unknown IP addresses or locations.
• Investigate Further:
• Take Appropriate Actions:

By investigating the login and security logs, you can identify and mitigate potential security threats effectively.

References

• View and analyze security reports and logs
• Audit and investigation page

• Navigate to Groups: Go to the Google Admin console and navigate to 'Groups'.
• Create a Security Group: Create a new group and set it as a security group.
• Assign Permissions: Set the appropriate permissions and policies that restrict access to only authorized employees.
• Manage Membership: Ensure that only administrators can manage the group membership, adhering to the principle of least privilege.
• Apply Policies: Apply access policies to the security group, ensuring that the confidential content is accessible only to authorized members.

References

• Create and manage security groups
• Google Groups for Business

• Admin Console: Log into the Google Admin console at admin.google.com.
• Security Settings: Navigate to Security > Authentication > 2-step verification.
• Enforce 2FA:
• Deployment: Ensure all highly sensitive user accounts are equipped with physical security keys (e.g., YubiKey).
• Enrollment: Assist users in enrolling their security keys through the Google Account settings under “Security”.

References

• Google Workspace Admin: Enforce 2-Step Verification
• Google Workspace Security: Security Keys